Skip to content
Threat Feed
Subscribe

Vendor

Soarkey

2 briefs RSS
high advisory

Improper Privilege Management in Soarkey StudentManagement

The RegisterServlet component in Soarkey StudentManagement is vulnerable to improper privilege management, allowing remote attackers to manipulate user account levels during registration via the 'level' argument.

StudentManagement web-vulnerability privilege-escalation
1t 1c
high advisory

Authorization Bypass in Soarkey StudentManagement

A vulnerability in the Administrative Servlet of Soarkey StudentManagement and 学生信息管理系统 allows remote attackers to bypass authorization via manipulation of the action argument in AdminDao.doGet.

StudentManagement +1 web-application vulnerability authentication-bypass
1r 1c